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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith {or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . ^ This communication is responsive to Appeal Brief filed on 1 1/14/08 and a telephonic communication on 8/20/09 . 

2. ^ The allowed claim(s) is/are 1-5 and 26-30 . 

3. ^ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) E| All b) □ Some* c) □ None of the: 

1. ^ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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DETAILED ACTION 

This Office Action is in response to Applicant's Appeal Brief filed on 1 1/14/08 and a 
telephonic communication on 8/28/09. 

Examiner Amendment 
An Examiner's Amendment to the record appears below. Should the changes and/or 
additions be unacceptable to Applicant, an amendment may be filed as provided by 37 
CFR 1 .312. To ensure consideration of such an amendment, it MUST be submitted no 
later than the payment of the Issue Fee. 

The following changes were authorized by Antony Ng in a telephone interview on 
8/20/09. 

Please amend claims 1 and 26 as follows: 

1 . A method of managing password for a plurality of software resources accessible by a 
user, said method comprising: 

providing a password registry for storing passwords within a workstation; 
allowing each of a plurality of software resources to register its password 
in said password registry via a respective one of a plurality of front-end 
processes within said workstation, wherein each said password is encrypted by 
said respective front-end process before being stored in said password registry; 
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in response to an access request to one of said software resources via a 
corresponding one of said front-end processes, determining if an encrypted 
password associated with said requested software resource is stored in said 
password registry; 

in a determination that said encrypted password associated within said 
requested software resource is stored in said password registry, sending said 
encrypted password from said password registry to said corresponding front-end 
process for decrypt i on i n ordor to pormit sa i d access request , said 
corresponding front-end process decrypting the encrypted password and 
permitting said access request based on the decrypted password by the front- 
end process : and 

in a determination that said encrypted password associated within said 
requested software resource is not stored in said password registry, notifying 
said front-end process to prompt resulting in prompting for a password from a 
user. 



26. A computer readable storage medium having computer program product for 

managing passwords for a plurality of software resources accessible by a user, said 
computer readable medium comprising: 

computer program code for providing a password registry for storing 
passwords within a workstation; 
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computer program code for allowing each of a plurality of software 
resources to register its password in said password registry via a respective one 
of a plurality of front-end processes within said workstation, wherein each said 
password is encrypted by said respective front-end process before being stored 
in said password registry; 

computer program code for, in response to an access request to one of 
said software resources via a corresponding one of said front-end processes, 
determining if an encrypted password associated with said requested software 
resource is stored in said password registry; 

computer program code for, in a determination that said encrypted 
password associated within said requested software resource is stored in said 
password registry, sending said encrypted password from said password registry 
to said corresponding front-end process for d e crypt i on i n ord e r to p e rm i t sa i d 
acc e ss r e qu e st , said corresponding front-end process decrypting the encrypted 
password and permitting said access request based on the decrypted password 
bv the front-end process : and 

computer program code for, in a determination that said encrypted 
password associated within said requested software resource is not stored in 
said password registry, notifying said front-end process to prompt resulting in 
prompting for a password from a user. 



Examiner's Statement of Reasons for Allowance 
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Applicant's arguments articulating the differences between the prior art and 
applicant's invention as indicated in applicant's arguments presented in Appeal Brief 
filed on 1 1/14/08 (in particular pg. 5-6) and supported by the amended claimed 
language (and the original specification, see pg. 10 lines 5-7, for example) were 
reconsidered and found persuasive. 

An additional search revealed other relevant prior art: Inala (USPUB 2001/0000537) 
discloses managing various user passwords, Chandra (USPUB 2002/0138582) teaches 
the use of variety of processes in a collaboration environment while utilizing a personal 
information manager, Lewis (USPUB 2003/0028813) relates to a password generator 
and password encryptor, Hsieh (USPUB 2003/0079147) and Jamieson (USPUB 
2005/005094) talks about a single sing-on system enabling a user access to a variety of 
system resources via a single server (Jamieson explicitly talks about 
encryption/reencryption of credentials), Berstis (USPN 7188240) relates to a system 
using encrypted memory location and storing passwords, and Rojewski (USPN 
7581245) discusses evaluating computer system passwords. 

However, neither the newly discovered or previously considered prior art, anticipates 
or fairly suggests the limitation of applicant's independent claims, in such a manner that 
a rejection under 35 U.S.C. 102 or 103 would be proper. In particular, none of the 
references, alone or in combination, teach or suggest providing a plurality of front-end 
processes on a workstation, each of said front-end processes corresponding to a type 
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of system resources accessible by a user via said workstation, generating an encrypted 
password for each of said types of system resources from encrypting a corresponding 
unencrypted password provided by a user, storing said encrypted passwords in a 
password registry within said workstation in response to an access request to one of 
said system resources via a corresponding one of said front-end processes, retrieving 
from said password register an encrypted password corresponding to said requested 
system resource and passing said retrieved password from said password registry to 
said corresponding front-end process for decryption in order to permit said access 
request, as required by the independent claim 1 and 26. 

As a result the claims 1-5 and 26-30 are considered to be in condition for allowance 
as being novel and non-obvious over prior art. 

Any comments considered necessary by applicant must be submitted no later than 
the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
statement of Reasons for Allowance". 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Peter Poltorak whose telephone number is (571) 272- 
3840. The examiner can normally be reached from Monday through Thursday from 
9:00 until 5:00, and every other Friday from 9:00 until 5:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571 ) 272-381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is (571) 273-8300. 
Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the Group receptionist whose telephone number is (571) 272- 
1600. 

/Peter Poltorak/ 
Examiner, Art Unit 2434 

/Michael J Simitoski/ 

Primary Examiner, Art Unit 2439 



